PRT-scan is the second campaign in recent months where a threat actor has leveraged AI for automated targeting of a ...

OpenAI revoked its macOS signing certificate after a malicious Axios dependency incident on March 31, 2026, preventing ...

Factory 2.0 deepens security with new AI tools, Actions, and Skills to continuously reconcile open-source artifacts across ...

Cisco has suffered a cyberattack after threat actors used stolen credentials from the recent Trivy supply chain attack to ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

Whale.io has never been short on ideas for what a crypto casino could be. Today, it’s adding another one to the list. The ...

The TeamPCP hacking group has been using credentials stolen in the recent OSS campaign to enumerate and compromise AWS ...

While Anthropic has attempted to contain the leak damage with takedown requests, the AI agent's code unsurprisingly spread ...

In Kilo’s vision, every employee eventually carries two identities—their standard human account and a corresponding bot ...

UNC1069 compromised Axios 1.14.1 and 0.30.4 via social engineering, impacting 100M weekly downloads and exposing supply ...

More recently, fears of reaching artificial general intelligence (AGI) have become more real with the advent of powerful ...